Security Bulletin: Multiple security vulnerabilities in IBM SDK, Java Technology Edition affects IBM OpenPages

Summary

IBM® SDK, Java™ Technology Edition is shipped as a supporting program of IBM OpenPages. Information about a security vulnerability affecting IBM SDK, Java Technology Edition has been published in multiple security bulletins. These products have addressed the applicable CVE(s). For a complete list of vulnerabilities, refer to the link for IBM Java SDK Security Bulletins located in the Remediation/Fixes section for more information.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
IBM OpenPages with Watson	9.0
IBM OpenPages with Watson	IBM OpenPages with Watson 8.3

Remediation/Fixes

Fixes have been created for each affected version of the named product. Download and install the fix as soon as possible. Fixes and installation instructions are provided at the URLs listed below:

For IBM OpenPages with Watson, IBM recommends upgrading to Upgrade to IBM SDK, Java Technology Edition Version 8.0.8.15

To Download IBM SDK, Java Technology Edition Version 8.0.8.15 refer to IBM Java SDKs for Liberty for Archive or Installation Manager Installs (Fix Central)

Product

| Instructions
—|—

For IBM OpenPages with Watson **8.3 or 9.0 **

|

Follow the appropriate steps to upgrade Java on each OpenPages server type.

• Application Server
  • Upgrade to IBM SDK, Java Technology Edition Version 8.0.8.15 refer to instructions How to Update Java on an OpenPages Application Server
• Search Server
  • Upgrade to IBM SDK, Java Technology Edition Version 8.0.8.15 refer to instructions How to Update Java on an OpenPages Global Search Server
• Reporting Server
  • Upgrade to IBM SDK, Java Technology Edition Version 8.0.8.15 refer to instructions How to Update Java on an OpenPages Reporting Server

For IBM OpenPages GRC Platform v8.0/8.1/8.2 customers, IBM recommends to upgrade to a fixed and supported versions** 8.3 or 9.0** of the product.

For CVE numbers fixed in IBM SDK, Java Technology Edition related to IBM OpenPages, see the following IBM Java security bulletins:

<https://www.ibm.com/support/pages/node/6967221&gt;

<https://www.ibm.com/support/pages/node/7001663&gt;

<https://www.ibm.com/support/pages/node/7017032&gt;

<https://www.ibm.com/support/pages/node/7028074&gt;

<https://www.ibm.com/support/pages/node/7078433&gt;

Workarounds and Mitigations

None